Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
File: ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft (raw, json)
Hash identifier: WDbwk7ro3CIn/Ct0sHKuAqvhaLze4e3dPy0Td3hF4fE=
Subject key identifier: 6E:B4:8F:B9:03:BA:80:22:DD:65:E0:E4:44:83:B9:81:0A:23:C3:51
Authority key identifier: 64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
Certificate issuer: /CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Certificate serial: 019D382E5825FFACEAF2A92AD3F681103512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
Manifest number: 0A44
Signing time: Sun 29 Mar 2026 06:00:54 +0000
Manifest this update: Sun 29 Mar 2026 06:00:54 +0000
Manifest next update: Mon 30 Mar 2026 06:00:54 +0000
Files and hashes: 1: CB7ZOTfRe3Lfy6bzU3USZ75HVvw.roa (hash: FlUrZcGjnxqC1lXl49edK/FXKIDYYIun/75ke4aPSyw=)
2: KER-U-aRYckOZzpn7PbWOavueRg.roa (hash: VnTgbJYVhXdPGDTQ2hppQejhsFcgs5I5az6oUP5boak=)
3: ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl (hash: 2/FkJW9wwJWeWn23DGUGTmdyh1nwe/GsZrSaEZqjO28=)
4: dO6zq4mmDPmBhklgeAWbYzuw7zU.roa (hash: 8vn7qHuvz3bv0ogVMjPFxFjhxK9cBzVdZyb1bNw0jOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:58:25:ff:ac:ea:f2:a9:2a:d3:f6:81:10:35:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Validity
Not Before: Mar 29 06:00:54 2026 GMT
Not After : Mar 30 06:00:54 2026 GMT
Subject: CN=6eb48fb903ba8022dd65e0e44483b9810a23c351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:60:61:20:b4:ce:e7:ce:ad:59:55:3b:8a:2f:
71:07:04:8c:60:0c:59:36:df:c4:ec:24:c0:8e:01:
f6:fe:36:06:67:a6:39:43:57:2f:03:52:93:71:57:
14:7c:9f:f3:52:90:dd:12:04:7c:0d:4b:47:76:96:
1a:fb:10:2e:16:26:9c:a8:30:7b:2c:c4:5a:ed:46:
6d:fb:35:50:ae:d3:85:98:40:81:b9:90:1a:5e:6d:
4b:ca:68:10:5e:a8:ab:1d:7a:24:d3:35:5b:5d:bb:
c3:85:fb:e1:65:75:c6:52:01:d5:8f:55:20:88:64:
c2:3e:d3:83:38:75:1f:78:6c:d0:24:06:e5:0d:6b:
c1:c7:82:a3:e1:4b:fb:cf:4e:9a:3d:52:02:16:ef:
2c:8d:07:d6:8a:2a:56:01:04:80:48:c6:8d:42:31:
1c:1a:f6:28:68:3f:60:27:58:79:bb:35:ea:43:3f:
a2:c1:d3:98:a8:0b:28:cd:25:4c:66:13:d4:ea:0c:
43:d6:b2:c9:7d:e8:b3:6c:9f:f5:27:50:b2:22:e7:
eb:80:b5:5f:03:cc:de:76:aa:15:70:fc:ea:80:c1:
18:a6:85:69:28:16:a6:bd:ca:35:6f:ae:a1:ad:1b:
f2:96:df:e1:c6:85:b9:6d:39:46:56:8d:38:5b:80:
a3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B4:8F:B9:03:BA:80:22:DD:65:E0:E4:44:83:B9:81:0A:23:C3:51
X509v3 Authority Key Identifier:
keyid:64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ae:f0:30:4d:2b:49:b5:78:20:bf:e7:57:5c:be:45:46:e5:
e7:96:61:55:87:31:43:b4:cb:5d:12:61:a1:e4:c5:9c:b3:ac:
a4:08:63:42:e7:26:44:20:6b:63:e9:87:00:c8:4f:a9:09:4d:
78:34:1b:6f:38:58:31:21:6b:3f:aa:47:1a:3b:12:f7:c3:be:
9c:07:d5:41:6e:6e:02:2e:2d:c7:18:af:51:04:f3:f7:6b:e4:
9a:04:b4:e1:dd:4f:29:99:d6:40:9c:e9:a9:98:58:3d:06:c3:
23:c3:74:b1:10:dc:da:97:91:33:93:f2:bc:fa:77:e5:b8:53:
0e:ae:bd:3a:82:2d:f8:64:4e:3a:bf:b3:0f:70:3b:c1:6f:f3:
23:4d:20:9f:29:d3:61:20:ee:35:40:e9:32:96:e2:2f:cb:52:
7b:4b:fd:4d:b4:a8:44:b6:04:4e:93:75:a3:6c:a4:48:28:91:
e0:f4:64:89:b8:62:9a:2b:fd:15:7e:d4:49:ab:e8:c7:86:33:
15:c1:5b:2f:59:62:34:56:ec:a4:a8:7b:5a:52:7c:10:13:9b:
d6:d4:8f:5d:4b:bc:8e:da:b6:08:ba:a9:bb:9d:3b:7c:3e:72:
6d:82:c9:ca:40:1b:59:80:12:d0:d2:b4:48:7e:64:1f:ab:bc:
dd:62:b6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:11 2026 by rpki-client